CVE-2026-5290 in Chrome
Сводка (Английский)
Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Ответственный
Chrome
Резервировать
31.03.2026
Раскрытие
01.04.2026
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354604 | Google Chrome Compositing повреждение памяти | 416 | Не определено | Официальное исправление | CVE-2026-5290 |